Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e33302e302f32332d3234203d3e203233393530.roa
File: 3230322e35312e33302e302f32332d3234203d3e203233393530.roa (raw, json)
Hash identifier: x1kqzJi4SsMuo+0Qxa1rUjPNa0qhD+pGqeZaVSvGl+o=
Subject key identifier: 07:95:85:6D:C8:D8:A6:38:15:E5:44:50:44:4A:B0:0E:85:AC:F6:75
Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Certificate serial: 3139725F8A20834CD4460DA57825A7B54A0CE7B9
Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e33302e302f32332d3234203d3e203233393530.roa
Signing time: Thu 07 Dec 2023 15:00:00 +0000
ROA not before: Thu 07 Dec 2023 14:55:00 +0000
ROA not after: Thu 05 Dec 2024 15:00:00 +0000
asID: 23950
IP address blocks: 202.51.30.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 17:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:39:72:5f:8a:20:83:4c:d4:46:0d:a5:78:25:a7:b5:4a:0c:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Validity
Not Before: Dec 7 14:55:00 2023 GMT
Not After : Dec 5 15:00:00 2024 GMT
Subject: CN=0795856DC8D8A63815E54450444AB00E85ACF675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:56:f5:32:1c:d6:e9:16:56:3b:1d:f3:4d:
d5:eb:d1:f4:01:c6:77:86:12:9a:c2:bc:23:ac:29:
c5:c9:7d:06:19:e0:02:7b:e3:92:18:9f:8e:ae:54:
52:43:bb:19:e6:93:45:70:4d:a3:bc:32:13:f4:cc:
58:0b:8b:99:51:0f:f6:b7:ea:84:ad:a1:cd:c2:d8:
50:40:19:01:a2:8b:24:8a:b6:5d:9a:e9:4a:8b:2f:
da:d4:c0:08:2a:e8:ab:11:92:a2:e4:ac:d8:85:30:
e5:da:77:5f:34:cd:d2:3b:8f:de:29:eb:10:ea:4c:
d9:97:5b:b6:30:e7:bd:1d:ca:e3:b1:0d:03:69:86:
46:84:41:b7:59:d4:f9:8f:8f:b5:13:bf:8e:55:6a:
6c:16:57:57:fc:3d:43:1d:29:c8:46:4c:78:88:92:
85:c8:db:eb:23:b1:a5:19:d6:95:f6:5f:a1:f6:0a:
f3:b9:13:db:f2:1b:60:5b:5c:af:8f:69:72:a8:b4:
b6:4a:0f:a2:5d:d0:6d:4c:8f:47:86:d5:10:38:94:
20:e8:11:76:9b:ca:fb:7a:bf:72:28:44:99:f0:42:
60:7e:6a:04:62:e7:0c:dd:b3:5b:65:3d:60:e4:8e:
76:77:c9:2f:41:c4:8a:05:95:2c:a6:e9:c1:b5:73:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:85:6D:C8:D8:A6:38:15:E5:44:50:44:4A:B0:0E:85:AC:F6:75
X509v3 Authority Key Identifier:
keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e33302e302f32332d3234203d3e203233393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.30.0/23
Signature Algorithm: sha256WithRSAEncryption
14:f3:ec:6d:f5:07:6f:b0:3a:97:a7:92:f8:23:7c:89:26:9e:
61:91:51:d5:4b:b6:1f:f2:86:a9:3d:ea:11:58:5d:f0:df:35:
f3:b1:53:bb:84:65:54:01:c4:7f:1d:e9:5f:0a:07:75:48:37:
25:d6:58:52:7b:b3:a4:d2:88:59:11:49:1d:59:e7:c5:5b:3e:
1f:39:d9:81:1d:25:9c:55:20:9e:18:eb:fe:fc:c9:63:47:e4:
eb:68:b0:a3:f3:a5:66:1e:f2:62:3f:b6:80:8c:8d:02:97:93:
23:7b:c6:01:04:13:7a:3a:83:48:f0:15:16:60:e3:02:3b:e7:
a6:c8:05:f7:06:7f:76:e9:c4:ab:80:19:db:08:a9:55:ed:12:
76:0e:73:7a:3c:6b:cd:ff:86:ef:f4:5b:a5:bf:ea:00:9c:14:
9b:a8:1d:ae:58:65:4e:a4:fe:a5:7d:6b:6f:64:90:f9:c5:97:
81:45:f9:b4:a0:d8:87:d6:cf:57:84:9f:ec:3c:58:ed:7b:f1:
57:23:09:e0:cc:6b:19:9f:a9:0c:05:10:44:ac:3e:1e:20:47:
4d:40:f5:f3:55:b6:8f:19:ad:6e:fe:a4:dc:8e:b0:a2:68:f8:
9d:49:67:b5:5d:ff:e2:2b:b6:fe:6c:b8:a1:0e:c2:45:73:cf:
3c:b7:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 19:19:42 2024 by rpki-client on console.sobornost.net